Aug 2019 – Apr 2021 · 1 yr 8 mos

• Prasad got transferred to Fiserv Costa Rica office to build team of Application penetration testers. Prasad was responsible to carry out following responsibilities -
• 1. Creating team of penetration testers out of local talent within the organisation.
• 2. Elevate technical expertise of existing resources working on Application security program.
• 3. Act as a single point of contact for Fiserv Costa Rica application security team.
• 4. Perform application security program responsibilities.

Apr 2018 – Aug 2019 · 1 yr 4 mos

• Prasad was responsible for managing team of penetration testers at Pune location. This includes -
• 1) People management responsibilities.
• 2) Keeping track of penetration testing deliverables.
• 3) Ensuring quality of deliverables.
• Prasad was responsible to work with multiple business units across the enterprise to understand the application architecture and perform risk assessment on the application architecture.
• Prasad was responsible to perform risk management of security issues reported by penetration testers with the help of remediation timelines and compensating controls.
• Additionally, he was responsible to perform penetration testing on various types of applications.

Oct 2015 – Mar 2018 · 2 yrs 5 mos

• Prasad was responsible for managing team of 5-6 penetration testers. This includes -
• 1) People management responsibilities.
• 2) Keeping track of deliverables.
• 3) Ensuring the quality of deliverables.
• In addition to people management responsibilities, additional responsibilities includes but not limited to -
• 1) Performing penetration testing on web applications, web services / API's, Thick client applications and mobile applications.
• 2) Acted as subjected matter expertise of mobile applications on enterprise level from security point of view.
• 3) Driving innovation part across the enterprise application security team by keeping close track of new security issues coming on the surface, keeping close eye on security standards like OWASP Top 10, SANS Top 25, NIST, PCI-DSS.

Mar 2013 – Sep 2015 · 2 yrs 6 mos

• Prasad was responsible to conduct penetration testing of web applications, web services / API's, thick client applications and mobile applications.
• Prasad was responsible to build mobile application penetration testing team on enterprise level. This includes preparing technical documentations, creating process documents and maintaining repository of all security test cases.
• Additionally, he was responsible to perform internal reviews of the penetration testing deliverables created by several penetration testers.
• Prasad was single point of contact for penetration testing team working at Pune location from operational as well technical point of view.
• Prasad was responsible to conduct remediation meetings with application owners and other stakeholders in order to make them understand the security issues and their technical remediation.

Mar 2010 – Feb 2013 · 2 yrs 11 mos

• Prasad was part of Enterprise application security team. He was responsible to conduct penetration testing on web applications, web services, mobile.applocations as well as thick client applications.
• Prasad was responsible to perform automated security scanning of web applications using several security scanning tools.

Oct 2007 – Mar 2010 · 2 yrs 5 mos · Pune/Pimpri-Chinchwad Area

• Prasad worked as information security engineer with Information security team at Syntel. Prasad worked on following areas -
• 1) ISO 27001 Audits - Performed internal audits of several horizontal support groups including but not limited to IT, Admin.
• 2) Digital Forensic Investigation - Performed digital forensic investigation using various tools such as EnCase, WinHex etc.
• 3) Web Application Penetration Testing - Performed web application penetration testing on various applications from different technology stacks including but not limited to .NET, JAVA etc.
• Prasad also worked as developer and delivered projects based on following technology stacks -
• 1) C#.NET
• 2) SharePoint 2007